PRIMITIVE INTEGRAL SOLUTIONS TO x 2 + y 3 = z 10 

DAVID BROWN 

Abstract. We classify primitive integer solutions to x 2 + y 3 = z 10 . The technique is to 
combine modular methods at the prime 5, number field enumeration techniques in place of 
modular methods at the prime 2, Chabauty techniques for elliptic curves over number fields, 
■ and local methods. 
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Q \ 1. Introduction 

We say a triple (s, t, u) is primitive if gcd(s, t, u) = 1. For integers a, b, c > 3 the equation 
x a + y b = z c is expected to have no primitive integer solutions with xyz ^ 0, while for 
n < 9 the equation x 2 + y 3 = z n has many solutions with xyz ^ 0; the triple (±3, —2, 1) is, 
for instance, always a solution. Moreover, there are infinitely many parametriezed solutions 



with xyz 7^ and z 2 ^ 1 when n < 5 and there are some (but only finitely many) such 



solutions for 6 < n < 9; see [PSS07J for the case n = 7 and a detailed review of previous 
work on generalized Fermat equations. 

The 'next' equation to solve is x 2 + y 3 = z 10 - it is the first of the form x 2 + y 3 = z n 
■ expected to have no solutions such that xyz ^ and z 2 ^ 1. 
(N . 

CO . Theorem 1.1. The primitive integer solutions to x 2 + y 3 = z 10 are the 12 triples 

(±1, -1, 0), (±1, 0, ±1), (0, 1, ±1), (±3, -2, ±1). 

It is clear that the only primitive solutions with xyz = are the eight above. To ease 
^ ■ notation we set S(Z) = {(a, 6, c) : a 2 + b 3 = c 10 | (a, 6, c) is primitive}. 



One idea is to use Edwards's parameterization of x 2 + y 3 = z 5 . His thesis |Edw04] produces 
a list of 27 degree 12 polynomials fa G %[x,y] such that if (x, y, z) is such a primitive triple, 
then there exist i,s,t e Z such that 

z = fi(s,t) 

and similar polynomials for x and y. This would reduce the problem to finding integral 
points on the 27 genus 5 hyperelliptic curves — z 2 = f(s,t). This is a tempting approach, 
but the computational obstructions have not yet been overcome. 

Alternatively, an elementary argument yields a parameterization of x 2 + y 3 = z 2 , leading 
one to (independently) solve each of the two equations 

y 3 + y\ = z 5 or 



y\ + 2y 3 = z 
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Following |BruOO] . a resultant/Chabauty argument resolves the first equation. For the second 
equation one must pass to a degree 3 number field, where one runs into a genus 2 curve whose 
Jacobian has rank 3. There is less hope here for a classical Chabauty argument; [SS10J gives a 
solution along these lines, combining classical Chabauty methods with the elliptic Chabauty 
methods of [Bru03j. 

In a third direction one may consider the modular method used for example in [P SS07] to 
resolve the equation x 2 + y 3 = z 7 . This method is most effective for large p; in particular, 
for a prime p > 7 the modular curve X(p) has genus > 2 and conjecturally for p > 17 the 
curves Xe(p) have no non-trivial Q-points. Stated as a question by Mazur |Maz78l P. 133] 
for p > 7 and later relaxed to p > 17 (see [FM99, Table 5.3] for examples), this is now often 
called the Frey-Mazur conjecture. We note that direct application of this method to the 
equation x 2 + y 3 = z 10 at the prime 5 fails because X(5) has genus 0. 

The approach of this paper is to combine the traditional modular methods at the prime 5 
described above and 'elementary' modular methods (based on number field enumeration) at 
the prime 2. Here the relevant modular curve is X(10), which has genus 13. However it covers 
an elliptic curve X (with a modular interpertation) and the relevant twists X^ E>E ^(10) cover 
X over a degree 6 number field Ke,e>- For the pair (E,E ; ) corresponding to the solution 
(3, —2, 1) the elliptic curve X has rank 1 over K E ,E' and one may apply the elliptic Chabauty 
methods of [Bru03j. Various local methods finish off the other cases. 

The computer algebra package Magma [BCP97j is used in an essential way throughout. 

Acknowledgements. I thank Bjorn Poonen for numerous conversations and for carefully 
reading earlier drafts of this paper and the participants of mathoverflow.net for help finding 
various references. Some computations were done on sage .math. Washingto n? edu[ which is 
supported by National Science Foundation Grant No. DMS-0821725. 

2. A MODULAR QUOTIENT OF X(10) 

Here we construct an elliptic quotient X of the full modular curve X(10) whose twists Xe 
will be the center of our calculations. 

Let E be an elliptic curve and p a prime. Following |PSS07l Section 4], we define X E {p) 
to be the compactified moduli space of elliptic curves E' plus symplectic isomorphisms (i.e. 
respecting Weil pairings) E'[p] = E[p] of Gal(Q/Q)-modules. Similarly, we define X(p) 
to be the variant of the classical modular curve which parameterizes E' plus symplectic 
isomorphisms E'[p] = fi p x Z/pZ of Gal(Q/Q)-modules; in particular X(p) is defined over 
Q, is geometrically connected, and X E (p)c is isomorphic to X(p) c . Finally, for p = 5 we 
define (as in |PSS07t 4.4]) the variant X^(5) to be the compactified moduli space of elliptic 
curves E' plus anti-symplectic isomorphisms E'[5] = E[5] of Gal(Q/Q)-modules; here we 
define anti-symplectic to mean that the map induced by Weil pairings /15 — > ^ is the map 
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Remark 2.1 f |PSS07l 4.4]). Any isomorphism E'[5] = E[5] of Gal(Q/Q)-modules gives rise 
to a point on either X E (5) or Xg(5). Indeed, for a positive integer A" with (AT, 5) = 1, the 

[TV] 

multiplication by A" map E — > E induces an isomorphism E[5] = E[5] which changes the 
Weil pairing by A^ 2 . Since F?j/ (F5) 2 = {1,2}, after composing with [N] for some N, we arrive 
at an isomorphism E'[5] = E[5] which either respects the Weil pairing or changes it by 2. 

Recall that Xq(p) is the modular curve whose points correspond to p-isogenies of elliptic 
curves up to twists. There are natural maps 

X(p) -> X (p) -> X(l). 

When p = 2, Gal(X(2)/X(l)) = S3, and one can check by a direct calculation that the 
quotient of X(2) by the normal subgroup A3 is the degree 2 cover ATa = P 1 of X(l) = P 1 
given by z 1— > z 2 + 12 3 . 

Definition 2.2. We define X to be the normalization of Xa x x(i) Xq(5). Denote by Y' the 
affine curve Y(l) — {12 3 }, let Y C X be the preimage of Y 1 in X, and let K be a number 
field; then a point in Y(K) corresponds (up to twists) to a 5-isogeny E — >• E' defined over 
K with j(E') 7^ 12 3 and a choice of a square root of j(E) — 12 3 = Cg/A^ in K (i.e. the 
fiber product ATa x x(i) X (5) is smooth away from cusps and the fiber of 12 3 e X(l), which 
one can see via moduli using [DI95, Equation 9.1.2] or directly from the equations for X 
computed below). 



X(10) 



X 



-X(5) 
*o(5) 



X{2) 



X(l) 



Since A3 is normal in S3, the natural map Xe{2) — > X(l) factors through a twist X& E of 
ATa mapping to X(l) via z 1— )■ • z 2 + 12 3 , and we define ATg to be the normalization of 
x x(i) A^o(5). An easy calculation using [DI95|, Equation 9.1.2] shows that Xe has genus 
1; we omit the proof as this will be clear below when we compute explicit equations for X%. 
Again, away from the cusps and the fiber over 12 3 G X(l), the fiber product is smooth and 
so for a number field K and for Ye the preimage of Y' in Xe, a point in Ye{K) corresponds 
(up to twists) to a 5-isogeny E' — > E" defined over K such that j(E) ^ 12 3 and a choice of 
a square root of (j(E') - 12 3 )/A E = c 2 6 /(A E A E/ ) in K. 



2.1. Equations. By |McM04l Table 3], equations for the map Y (5) 
5-isogeny (E —> E') to j(E) are given by 



t 1— >■ 



if + 250t + 3125) 3 {f - 500t - 15625) 2 (t 2 + 22t + 125) 



t 5 



t 5 



Y(l) sending a 



+ 12 3 



Equations for Ye are thus obtained by setting equal the equations 

A E ■ z 2 + 12 3 = (* 2 - 500t- 15625) 2 (t 2 + 22t+125) + ^ 

simplifying, and making the change of coordinates y = zt 3 /(t 2 — 500t — 15625). This gives 

A E -y 2 = t(t 2 + 22t+ 125), 

and the map Ye X^ E is given by 

, \ y(t 2 - 500t - 15625) 

3. Modular Methods at 2 
Following [PSS07, 4.6] we define for a primitive triple (a, b, c) the elliptic curve 

' J (a,b,c) 



E = E (abc) : Y 2 = X 3 + 3bX - 2a. 



Remark 3.1. The elliptic curve E has j-invariant 12 3 6 3 /c 10 = — 12 3 a 2 /c 10 + 12 3 ; thus j(E) — 
12 3 = — 12 3 a 2 /c 10 , which is —3 times a square. 

Setting E := E( 3t _ 2 ,i), this remark proves the following. 

Lemma 3.2. To (a, b, c) G S*(Z) one may associate a point on X& Eo (Q). 

In the following lemmas, we calculate -E( a ,6,c) [2] as a Gal(Q/Q)-module. The conclusion 
will be that the set of such possibilities is finite and explicitly computable. In fact, one 
can realize each possible Galois module as E'[2] for E' an elliptic curve, with finitely many 
explicit possibilities for E' . One may thus associate to £?( ,b,c) a point on one of the modular 
curves Xe>{2) and then combine this with level lowering at the prime 5 to get a point on 
a twist of the genus 13 curve X(10). Another idea is to use the explicit equations for the 
curve Xe>(2) given in |RS01] to derive local information about the triple (a,b, c). 

The idea is that knowledge of Et a ,b,c) [2] is equivalent to knowledge of the splitting field 
L of the polynomial / = X 3 + 3bX — 2a, and we will find that L is unramified outside of 
{2,3}. By Hermite's theorem, there are only finitely many fields of degree at most 3 and 
unramified outside of {2,3, oo}, and with the aid of a computer one can easily enumerate 
them and recognize each as the field of definition of the 2-torsion of an elliptic curve E 1 with 
good reduction outside of {2,3}, effectively 'lowering the level' of -E(a,b,c) at the prime 2 (an 
otherwise difficult task given that the usual level lowering theorems don't apply - the mod 
2 representation is often ramified at 2). The details come in the next two lemmas. 

Lemma 3.3 ('Level lowering' at 2). Let (a,b,c) G S(Z) be a primitive triple and suppose 
that a 7^ 0. Then f(x) = x 3 + 3bx — 2a is irrreducible. 

Proof. Let K = Q(.E( 0) j (C )[2]) be the splitting field of /. The discriminant of -E( a ,f>, c ) is — 12 3 c 10 . 
By the standard Tate uniformization argument (that after base change to the maximal 
unramified extension Qp n of Q p there exists an analytic Galois equivariant isomorphism of 
E{a,b,c) ® Qp 11 with a Tate curve G m /g z ), £( a) & )C )[2] (and thus K) is unramified at a prime 
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p > 3 of multiplicative reduction if 2\v p (Ae (ii b c) ) (see [E110H Corollary 1.2] for a more detailed 
proof of this fact). Since v p (A E{a b ) = v p (c 10 ) for p > 3, we conclude that K is unramified 
outside of {2, 3}. Since / is reducible then K has degree 1 or 2. There are only finitely many 
such fields of degree < 2, given by polynomials x 2 + D with D G {±1, ±2, ±3, ±6}. 

Let .Ed be the elliptic curve given by y 2 = x{x 2 + D). Then there exists a D as above 
and a point P G Xe d (2)(Q) representing i£( ,6,c) up to quadratic twist. Explicit equations 
paramaterizing such curves are given in jRSOlj : there exist u,v G Q such that -E , ( a ,6, c ) is 
isomorphic to the curve i^,,: y 2 = x 3 + 3-D(3t> 2 — Du 2 )x — 2(9D 2 uv 2 — D 3 u 3 ). The given 
model has discriminant A(E UiV ) = —2 6 3 6 D(v(v 2 + Du 2 )D) 2 . As this may only change by a 
12 th power, one concludes that for D ^ 3, j(E u>v ) — 12 3 = c 6 (-E Ui ,;) 2 /A(i? Mjl ,) is not —3 times 
a square and thus (by remark |3~T]) cannot be isomorphic to E( a ,b,c)- 

When D = 3, further analysis of the equation j(E u>v ) = j{E^ a ^ c )) = 12 3 6 3 /c 10 produces 
rational points on one of the genus 2 curves given by y 2 = x 5 — 3 5 and y 2 = x 5 — 3 7 ; 
an application of Chabauty's method (recorded in the transcript of computations at [Bro] ) 
determines the finite set of such points, and the only one corresponding to a primitive triple 
has a = 0. □ 

Lemma 3.4. Let (a, b, c) G 5(Z) be a primitive triple. Suppose that f(x) = x 3 + 3bx — 2a is 
irreducible. Then Q(E (aM) [2]) = Q(£ (3) _ 2>1) [2]). 

Proof. The proof is the same as lemma 13.31 except that here the computer algebra package 
Sage (which implements the Jones database of number fields | Jon] ) is used to enumerate all 
degree 3 number fields unramified outside of {2, 3, oo}; a transcript of computations verifying 
this can be found at |Broj . 

□ 

Remark 3.5. Lemmas 13.31 and 13.41 will be used in section |6] to give local information about 
possible values of j(E^ b ^) = 12 3 6 3 /c 10 . 

Remark 3.6. The mod 3 Galois representations arising from solutions to the equation x 2 + 
yi _ ^15 are s j m ilarly ramified at the prime 3, so that Ribet's level lowering theorem again 
does not apply. Nonetheless, the techniques of the 'level lowering' lemmas 13.31 and 13.41 can 
be pushed (with more work and knowledge of the subfield structure of Q(J5[3])) to classify 
all mod 3 representations arising from solutions to this equation. It remains to be seen if 
the local information one obtains is actually useful in solvng this Fermat equation. 

4. Modular Methods at 5 

Let (a, b, c) G £>(Z), let E = E( a ^ c ), and recall that we defined E to be £?( 3i _ 2 ,i). Following 
[PSS071 Section 6], we classify the possibilities for the Galois module E[5]. 

Lemma 4.1. E[5] is irreducible as a Gal(Q/Q) -module. 

Proof. If E[5] is reducible then there exists a 5-isogeny defined over Q. One can thus asso- 
ciate to E a point on Xo(5)(Q). Together with lemma l3~2l this implies that E corresponds 

5 



to a point on Xe (Q), which a Magma calculation reveals has rank 0. There are six tor- 
sion points and they have image {-102400/3, 20480/243, 00} in X(l). For (a, b, c) G S(Z), 
v§{j{E(afi jC ))) = v 5 (12 3 b 3 / c 10 ) is divisible by at least one of 3 or 10. On the other hand, 
for j = -102400/3 or 20480/243 one has v 5 (j) G {1,2}. We conclude that these do not 
correspond to j-invariants of elliptic curves coming from (a, b, c) G S"(Z). □ 

Let £ be the following set of 13 elliptic curves over Q in the notation of JCre97j: 

24A1, 27A1, 32A1, 36A1, 54A1, 96A1, 108A1, 216A1, 216B1, 288A1, 864A1, 864B1, 864C1. 

Lemma 4.2. There exists an E" G £ and a quadratic twist E' of E such that E'[5] = E"[5] 
as Gal(Q/Q) -modules. 

Proof. This is identical to [ PSSOTl Lemma 6.1], with the remark that since 13 is not a square 
mod 5 one can again exclude the 14 th newform. □ 

Definition 4.3. For an elliptic curve E with j-invariant j, define Ke to be the number field 
Q(a), with a a root of the polynomial 

f{t) = (t 2 + 250t + 3125) 3 - jt 5 . 

As the field Ke only depends on j(E), we will sometimes denote it by Kj. 

By the explicit equations of 12.11 an elliptic curve E' has a 5-isogeny over Ke> and gives 
rise to a point on Xq(Ke>). Moreover, by lemma fl~2l for E corresponding to a primitive 
triple (a,6,c) G S{Z) there exists an E 1 G £ such that K E = K E > (since E[h\ = E'[5], E 
has a 5-isogeny over a field L if and only if E' does). Thus, E corresponds to a point in 
Xq(5)(Ke>). Combining this with lemma [3721 we arrive at the key observation. 

Lemma 4.4. For (a,b,c) G S(Z), there exists an E' G S such that £7( a ,&,c) corresponds to a 
point Pe in Xe {Ke') whose image in Xa Eo (Ke*) in fact lands in X^ E (Q). 

The image of Pe in X(l) (i.e. j{E)) is rational too. As the field Ke depends only on the 
j-invariant of E, we note that the set of j-invariants of curves in £ is 

{35152/9, 0, 1728, 9261/8, 21952/9, -3072, -6, -216, -13824, 1536}. 

5. Elliptic Chabauty 

We now study the situation of lemma 14.41 

Proposition 5.1. Let j G {0, 1728, -13824}. Then 

j(X Eo {Kj)) n A(1)(Q) G {0, 1728, -13824, -102400/3, 20480/243, 00}. 

The proof requires consideration of the following problem. Given an elliptic curve E over 

Q, a map E P 1 defined over Q, and a number field K of degree d > 1 over Q, one would 

like to determine the subset of E(K) mapping to P X (Q) under vr. Let r be the rank of E(K). 

Suppose further that r < d; then under this hypothesis a partial solution to this problem has 

been worked out in |Bru03] . using a method analogous to Chabauty's method (see [PM07] 
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for a survey) in that one expands the map p-adic analytically locally (i.e. in terms of p-adic 
power series) and uses Newton polygons to analyze the solutions. This method has been 
completely implemented in Magma; see |Bru03] for a succinct description of the method and 
instructions for use of its Magma implementation. 

To use this we need to understand the output of the Magma function 

Chabauty (MWmap , Ecov, p). 

The first argument MWmap is a map from an abstract abelian group into the Mordell-Weil 
group of E over K\ we denote by A its domain and G its image. The second argument Ecov 
is a map from E to P 1 which is defined over Q. The third argument p is a prime of good 
reduction for E for which the map Ecov is also of good reduction. The function returns 
values N, V, R and L as follows (quoting the Magma documentation): 

• N is an upper bound for the number of points P G G such that Ecov(P) G P : (Q). 

• V is a set of elements of A that have images in P : (Q). 

• R is a number such that, if [E(K) : G] is finite and prime to R then N is also a 
bound for the number of points P G E(K) with image in P X (Q). 

• L is extra information which we will not use. 

An important point is that one does not need to know the entire Mordell-Weil group E(K), 
only a subgroup G with index prime to R. In the following proof of proposition 15.11 we will 
not be able to compute all of E(K). 

Proof of proposition [3T71 Magma code verifying the following can be found at |Bro] . Below, 
for P G X Eo a cusp (so that it represents a degenerate elliptic curve) we write j(P) = oo. 

Let j = —13824. The elliptic curve E Q given by y 2 = x 3 — 6x — 6 corresponds to the 
primitive triple (3, —2, 1) G 5(Z). It has j-invariant —13824 and Cremona label 1728rl. It 
is a quadratic twist of the elliptic curve E G £ with Cremona label 864bl, given by the 
equation y 2 = x 3 — 24x — 48. This is the most important case to consider in that there is 
actually a point on Xe (Ke) corresponding to a triple (a, b, c) G S(T). 

A Magma computation reveals that Xe {Ke) has rank 1. One can construct explicitly 
the point P G Xe (Ke) corresponding to a 5-isogeny of E over Ke- The Chabauty routine 
returns N = 8, j^V = 8, and R = 40. The images under MWmap of V are the known torsion 
points of lemma 14.11 and ±P. Using Magma, one can check that the subgroup generated 
by P and the torsion is 2 and 5 saturated, so that the index [Xe q (Ke) '■ G] is prime to 
R; the brute force point search necessary to check that G generates the Mordell-Weil group 
is infeasible. The j-invariants of the (possibly degenerate) elliptic curves corresponding to 
these 8 points are {-13824, -102400/3, 20480/243, oo}. 

Let j = 0. A Magma computation reveals that Xe {Kj) has rank 1. Let E G £ with 
j{E) = (there are two such curves). One can construct explicitly the point P G Xe {Kj) 
corresponding to a 5-isogeny of E over Kj. The Chabauty routine returns iV = 10, j^V = 10 
and R = 2. Using Magma, one can check that the subgroup generated by P and the torsion 
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points is 2 saturated. The j-invariants of the (possibly degenerate) elliptic curves corre- 
sponding to the images in X Eo (Kj) under MWmap of V are {0, -102400/3, 20480/243, oo}. 

Let j = 1728. A Magma computation reveals that Xe {Kj) has rank 0. The torsion 
subgroup has size 12, of which 4 points represent elliptic curves with j-invariant which is not 
a rational number. The j-invariants of the (possibly degenerate) curves they represent are 
{1728, -102400/3, 20480/243, oo}. 

□ 

Remark 5.2. We conclude that if (a, b, c) G S'(Z) is a primitive triple such that E^ b ^[5] = 
E[5] for an elliptic curve E such that j(E) G {0, 1728, —13824}, then (a, b, c) is one of the 
triples of theorem 11.11 

Remark 5.3. For other values of j one can compute that the rank of Xe q (Kj) is at most 3, 
but a brute force point search is too slow to explicitly determine a finite index subgroup. 

6. Local Methods 

Here we use local methods inspired by [PSS07, 7.4] to exclude the existence of any further 
primitive triples. 

Proposition 6.1. Let E G £ and suppose j(E) g {0, 1728, -13824}. Let E' be an elliptic 
curve such that E [5] = E'[5]. Thenj(E') ^ j{E^ a ^) for any primitive triple (a, b, c) G <9(Z). 

Proof. MAGMA code verifying this (as described below) is available at |Bro] . □ 

Remark 6.2. Note that this completes the proof of theorem 11.11 

The idea is the following. For any morphism X — >■ Y of varieties defined over Q and 
any prime p, one can (in principle) algorithmically determine the image f(X(Q p )) of the 
p-adic points. The existence of such an algorithm follows from an effective elimination of 
quantifiers; see [Mac76j. We explain how to do this for a map P 1 — > P 1 below. By lemma 
14.21 and remark I2TT1 -E( a ,b, c ) gives rise to a point on either Xg(5) or X^(5); the idea is then 
to apply this to the two maps Xe(5) — » X(l) (resp. X^(5) —> X(l)) and S —> X(l). 
Explicit equations for the map X E (5) — > X(l) (resp. Xg(h) — > X(l)) are given in [RS95] 
(resp. the appendix), and the map S — > X(l) sends a primitive triple to the j-invariant 
j(E( a ,b,c)) = 12 3 6 3 /c 10 . For each E G £ with j(E) g {0, 1728, -13824}, we will find a prime 
p such that the p-adic images of these two maps do not intersect; here we of course restrict 
the domain of S to primitive triples. Using the lemmas of section [31 one can also compare 
this to the local information coming from the maps Xe(2) — > X(l). 

Now we make this idea precise. Let P 1 A P 1 be given by the pair of homogenous polyno- 
mials fi(s, t), f 2 (s, t) G Z[s, t] and let p be a prime number. We partition the set P X (Q P ) into 
the two residue classes R\ = [Z p : 1] and R 2 = [1 : pZ p ] and instead study the single variable 
polynomials fi(Rj) G Q p [x) (where now x will range over Z p ). Let fi(Rj) = ■ Ylk( x ~ a i,j,k)- 
Using Newton polygons one can explicitly determine oti j t k to any desired precision, and from 
this is it straightforward to determine all values of fi(Rj) for x G Z p . 
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Example 6.3. As a very simple example, suppose Xe(5) — > X(l) is given by [/i,/^] and 
suppose that v p (a^i t k) = 4/3 for each i, k. Then for x G Z p , v p (x— ati,i,k) — min{t> p (:r), 4/3} G 
{0,1,4/3}. Thus, on the residue class [Z p : 1], one has v p (fi(x,l)) = v p (c^x) ■ deg/j • 
min{t> p (x), 4/3}; setting a« = v p (ci t i) we conclude that 0([Z P : 1]) C [p ai Z* : p a2 Z*]. Suppose 
now that p = 3 and ai = a 2 . Since gcd(6, c) = 1, ^3(^(^(0,6,0))) = f3(12 3 6 3 /c 10 ) 7^ 0. We 
conclude that v 3 (j(E')) ^ v 3 (j(E( aAc) )) for any E' G R\ C X B (5)(Q 3 ) and (a, 6, c) G S(Z P ). 

We have written MAGMA code (available at |Broj ) which takes as input an elliptic curve E 
and a prime p and returns, for each residue class Ri, a factorization j = n ■ Y[{ x ~ a j)/ Yl( x ~ 
(3j), where j is the affine part (i.e. the quotient /1//2) of the map X E (5) — >■ X(l) restricted 
to the residue class Ri. There is an optional parameter 'anti'; when this is set to 'true' the 
routine instead returns this data for the map X E (5) — > X(l). Using this, we ran the local 
test described above for each E G £ with j(E) G" {0, 1728, —13824} and in each case found 
primes p,p' G {2,3,5} for which Xe(5) (resp. X E (5)) fails the local test at p (resp. p 1 ). 



Appendix: Computing explicit equations for X e (5) ->■ X(l) 

Here we explain how, for an elliptic curve E, one can deduce explicit equations for the map 
X E (5) — y X(l) given knowledge of equations for Xe'(5)q — > X(1)q, where E' is 2-isogenous 
to E over Q. 

First we consider an abstract version of the problem: given a number field K and a 
morphism g : P^ — y P^ such that there exists an automorphism <ft of P^ such that g o is 
the base extension of a morphism / : Pq — > Pq, find such morphisms and /. 

Lemma A.l. LetF^ A P^ be an automorphism and suppose there exist distinct Qi, Q 2 , Q 3 G 

P X (Q) such that for every i and for every o G Gal(Q/Q) ; 4>{Q1) = {4>{Qi))° ■ Then <fi is de- 
fined over Q. 

Proof Representing as a Mobius transformation ^f^j, one can, after scaling by a non- 
zero ai, solve for the coefficients a« in terms of coordinates of the points Qj and 4>{Qj)- ft is 
then easy to see that a" = ai for all a G Gal(Q/Q) and thus ^ G Q. □ 

One can solve the abstract problem in the following situation: let Qi,Q2,Qz G P 1 (Q) be 
3 distinct points and suppose there exists an automorphism <$' : P^ — y P^ such that <f> o cj> 
and each Qi satisfy the hypothesis of lemma IA.ll Then <f> o <p is defined over Q. Setting 
g' — g o (</>') _1 , we get a commutative diagram 




pi 



Since one has / = g' o <fj o 0, we conclude that g' is defined over Q and differs from / by the 
Q-automorphism o 

Now suppose E is given by the equation y 2 = f(x). Let K = Q(E[2]) be the splitting 
field of f(x). Then the 2-torsion points of E are defined over K. Let {O, Pi, P2, P3} be the 

2-torsion points of E and define to be E / (Pi), with £ — V E; the quotient map and ^ 
the dual isogeny. 

As in |PSS07t 4.4] the isogeny E E\ changes the Weil pairing by 2 (since for a 2- 
isogeny ^, (ip(P),ip(Q)) = o ip(P),Q) = (2P,Q) = (P,Q) 2 , where the first equality is 
[Sil09j III.8.2]). In particular, if E' is an elliptic curve and £"[5] = E[5] is an anti-symplectic 
isomorphism (so that the map induced by the Weil pairing is ( 1— >■ £ 2 ) then the composition 

£"[5] = £[5] —k- £1 [5] (where ip\ is the restriction to £[5] of ipi) is symplectic. This induces 
an isomorphism <ft: X^(5)k — Xei(5)k over which is the situation of the above 

discussion. 

To apply this, let Qi e X^(5)(K) be three points induced by the isogenies fy. By com- 
puting j(E i ), it is easy to compute explicit points on X El (B)(K) which represent 4>{Qi). Let 
{ri, r 2 , r 3 } be the roots of f(x). Since is the x-coordinate of the 2-torsion point Pi G E(K), 
the Galois action on the ordered set {ri,r 2 ,r 3 } agrees with the action on {Ei, E 2 , E 3 }, and 
thus also on {Qi, Q2, Qs}- Our hypothesis is that we have an explicit identification of ^^(5) 
with P 1 . Thus, if we define 0': P 1 P 1 to be the map sending 0(Q f ) to [n : 1] G P^if), 
then the hypothesis of lemma IA.1I is satisfied for the composition <$' o <p. 

One can explicitly compute j(Ej), 4>{Qi) e -^^(i^), and the map 0'; equations for 
the map : X El (5) — > X(l) are computed in [RS95] . The composition o (0') _1 is thus 
an explicitly computable model for the map Xg(5) — > -X"(l). Magma code doing all of this 
explicitly is available at [BroJ. 

Remark A. 2. Now let E be given by the equation y 2 = x 3 + ax + b. In [RS95] the equations 
for the map Xg(5) — > X(l) are given as a function of the coefficients a and b of E. It 
it clear that the technique of this appendix can be refined to do the same for the map 
Xg(5) X(l), since all of the numbers constructed (e.g. the j-invariants of the 2-isogenous 
curves Ei) depend algebraically on a and b. However writing out the resulting equations 
would double the length of this paper and is thus omitted. 
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